{ inputs, config, pkgs, lib, ... }:

{

  imports = [
    inputs.ctucx-things.nixosModule
  ];

  dns.zones."ctu.cx".subdomains."things".CNAME = [ "${config.networking.fqdn}." ];

  age.secrets.restic-ctucx-things.file = ./. + "/../../../secrets/${config.networking.hostName}/restic/ctucx-things.age";

  restic-backups.ctucx-things = {
    user            = "ctucx-things";
    passwordFile    = config.age.secrets.restic-ctucx-things.path;
    paths           = [ "/var/lib/ctucx-things" ];
  };

  services.ctucx-things = {
    enable      = true;
    storagePath = "/var/lib/ctucx-things";
    nginx.enable     = true;
    nginx.enableACME = true;
    nginx.domain     = "things.ctu.cx";
  };

}